Digital Domain Audit: Heinz

Target: Heinz (food brand; owned by The Kraft Heinz Company) Domain: Digital (Digital / Technology) Date: June 2026 Scope: The Heinz brand’s own digital/data/cyber/surveillance/AI conduct re Israel. Kraft Heinz group-level tech is attributed at the group level except where it runs Heinz-brand activity.

Enterprise Technology Stack & Vendor Relationships

The Heinz brand operates within the broader Kraft Heinz Company digital infrastructure. The enterprise technology stack is documented primarily at the group level; where Heinz-brand marketing, content, and production activity is demonstrably run on those platforms, it is treated as in-scope with the caveat noted.

Microsoft Azure / SAP on Azure (group platform, Heinz-brand activity documented): In April 2022, Kraft Heinz announced a multiyear cloud and AI agreement with Microsoft, designating Azure as its preferred cloud platform and committing to migrate the majority of its global datacentre assets to Azure and its ERP software to SAP on Azure.¹ The partnership includes a joint Digital Innovation Office, Azure Digital Twins for 34 North American manufacturing facilities, and a Supply Chain Control Tower.¹ Kraft Heinz’s ketchup production - the Heinz brand’s core manufacturing activity - is demonstrably in scope: a dedicated AI agent called “The Cookbook,” built using Azure OpenAI, was piloted in 2025 specifically to encode 150 years of Heinz Tomato Ketchup production expertise and assist plant-floor workers.² This agent is described as one element of the company’s broader “KHAI” AI ecosystem on Microsoft Azure OpenAI infrastructure.³

Google Cloud (group platform, Heinz-brand marketing content documented): Kraft Heinz has also partnered with Google Cloud, deploying BigQuery, Vertex AI, Gemini, Imagen, and Veo through its TasteMaker generative AI marketing platform.⁴ TasteMaker, built with Google Cloud partner Apply Digital, covers “100+ brands.”⁵ Heinz-branded assets appear in the published TasteMaker case material, indicating Heinz-brand marketing content is generated on this Google Cloud infrastructure.⁵

Legit Security (group-level cybersecurity vendor; Israeli-founded, Unit 8200 alumni): Legit Security, an Israeli-founded application security posture management (ASPM) platform, lists Kraft Heinz as a named customer.⁶ Legit Security’s three co-founders - CEO Roni Fuchs, CTO Liav Caspi, and VP of R&D Lior Barak - are graduates of the Israeli Defense Forces’ Unit 8200 signals intelligence corps.⁷ The Kraft Heinz CISO has publicly engaged with Legit Security’s software supply chain security capabilities.⁸ This is a group-level cybersecurity relationship; public sources do not isolate whether Heinz-brand digital pipelines specifically route through Legit Security’s platform as distinct from other Kraft Heinz brands. Attributed to the Kraft Heinz group level, with Israeli-origin vendor relevance noted.

No other Israeli-origin enterprise technology vendor relationship specific to the Heinz brand has been identified in public sources.

Surveillance, Biometrics & Retail Technology

ByondXR (Israeli immersive-retail vendor; Kraft Heinz group client): ByondXR, an Israeli SaaS company headquartered in Tel Aviv and founded in 2015, lists Kraft Heinz in its publicly disclosed customer portfolio under the CPG category.⁹ The specific engagement described on ByondXR’s customer page is a “Kraft-Heinz B2B Virtual Food Court,” a business-to-business virtual experience for discovering culinary innovation across the Kraft Heinz portfolio.⁹ ByondXR’s CTO and co-founder Eran Galil held a CTO position in the IDF’s Unit 8200 intelligence corps before his commercial career.¹⁰

Attribution assessment: The ByondXR deployment is framed as a B2B group-level trade/sales experience spanning the Kraft Heinz brand portfolio, not a consumer-facing Heinz-brand digital retail channel. Published sources do not confirm that the Heinz ketchup brand specifically commissioned or operates a dedicated ByondXR deployment. The relationship is therefore attributed to the Kraft Heinz group level - a group-level B2B platform engagement with an Israeli immersive-retail vendor. It is documented here because the vendor publicly names Kraft Heinz, and because ByondXR’s CTO background in Unit 8200 is a matter of public record, but the evidence does not support attributing this engagement to the Heinz brand specifically.

No public evidence identified of Heinz-brand deployment of biometric surveillance, facial recognition, or consumer tracking technology in retail environments.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Kraft Heinz’s disclosed cloud strategy centres on Microsoft Azure as its primary platform, with data migration and SAP ERP workloads committed to Azure globally.¹ The group’s internal AI assistant (KHAI) and The Cookbook ketchup-production agent run on Azure OpenAI infrastructure.³ TasteMaker, used for Heinz-brand marketing content generation, runs on Google Cloud’s Vertex AI, BigQuery, and associated generative AI services.⁴⁵

No public evidence identified that Heinz-brand workloads are hosted on Israeli sovereign cloud infrastructure (e.g. Microsoft Azure Israel Central, which launched in 2024). The Microsoft Azure Israel Central region serves Israeli enterprise customers; no Kraft Heinz or Heinz-brand workload has been publicly attributed to it.

No public evidence identified of Heinz-brand participation in Israeli government cloud procurement frameworks or data-residency arrangements with Israeli public-sector entities.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of Heinz-brand technology relationships with Israeli defence contractors, intelligence agencies, or security sector entities.

At the Kraft Heinz group level, the Legit Security relationship represents a documented engagement with an Israeli-founded vendor whose co-founders originate from Unit 8200.⁷ The scope of that engagement is enterprise software supply chain security across the Kraft Heinz DevSecOps pipeline - a cybersecurity function, not a defence or intelligence relationship. This is attributed to the Kraft Heinz group level.

No public evidence identified that Heinz-brand infrastructure or data is processed by, or shared with, Israeli intelligence services or military-adjacent technology providers.

AI, Algorithmic & Autonomous Systems

Heinz “A.I. Ketchup” campaign (DALL-E 2, OpenAI): In 2022, the Heinz brand launched its “A.I. Ketchup” campaign, created by agency Rethink, using OpenAI’s DALL-E 2 image generation model.¹¹ The campaign fed ketchup-related prompts into DALL-E 2 and used the resulting images - which consistently recalled Heinz Tomato Ketchup packaging - as the basis for advertisements, then invited consumers to submit their own prompts.¹¹¹² The campaign generated over 1.15 billion earned media impressions and won a Clio Gold Award in 2023.¹² OpenAI is a US-domiciled entity; no Israeli-nexus component to this deployment has been identified.

“The Cookbook” ketchup AI agent (Azure OpenAI, Microsoft): In 2025, Kraft Heinz piloted “The Cookbook,” an AI agent built on Azure OpenAI encoding 150 years of Heinz Tomato Ketchup production knowledge, allowing plant workers to query batch parameters, colour standards, and process efficiency data.² This is the most operationally significant AI deployment directly attributable to Heinz-brand manufacturing to date.

TasteMaker platform (Google Cloud Vertex AI / Gemini): The Heinz brand’s marketing content is in scope for Kraft Heinz’s TasteMaker AI platform, which uses Google’s Vertex AI, Gemini, Veo, and Imagen to generate brand-consistent marketing materials across 100+ brands; published case material includes Heinz-branded creative outputs.⁴⁵

KHAI (KraftGPT) internal AI assistant (Azure OpenAI, Microsoft): Kraft Heinz’s group-wide internal generative AI tool, initially called KraftGPT and later KHAI, was deployed to approximately 13,000 employees globally.³ Heinz-brand employees are among the user base as part of the group deployment. Attributed to the Kraft Heinz group level.

No public evidence identified of Heinz-brand AI systems using Israeli-developed models, frameworks, or datasets.

Technology Ecosystem & R&D Footprint

No public evidence identified of Heinz-brand R&D facilities, technology partnerships, or innovation centres in Israel. The Kraft Heinz group maintains no publicly disclosed Israeli R&D presence.

Heinz-brand technology innovation is documented at the manufacturing-AI and marketing-AI layers described above. The ecosystem partners are Microsoft (Azure, Azure OpenAI), Google Cloud (Vertex AI, Gemini, Veo, Imagen), Apply Digital (TasteMaker implementation partner), and Rethink (creative agency for the 2022 DALL-E campaign).¹²⁴⁵¹¹ None of these partners are Israeli-domiciled entities, though ByondXR (Israeli, Unit 8200 CTO) and Legit Security (Israeli, Unit 8200 founders) operate at the Kraft Heinz group level as noted above.

No public evidence identified of Heinz-brand participation in Israeli government innovation programmes, accelerator schemes, or bilateral R&D partnerships.

Civil Society Scrutiny & Regulatory History

No public evidence identified of civil society campaigns, regulatory enforcement actions, or published investigations specifically targeting Heinz-brand digital, AI, or surveillance technology practices in an Israeli or Palestinian context.

Kraft Heinz received a score of 42.1/100 in the 2026 Social Benchmark assessing human rights, decent work, and ethical conduct across 2,000 companies globally,¹³ but that assessment does not engage with technology or digital-nexus concerns relating to Israel.

No GDPR enforcement actions, data protection authority fines, or regulatory proceedings against Kraft Heinz or the Heinz brand for data privacy violations have been identified in public sources for the 2023–2026 period.

BDS movement published guidance does not identify Kraft Heinz or the Heinz brand as a technology-sector target; BDS targeting guidance focuses on technology companies with direct contracts with the Israeli state or IDF.¹⁴

End Notes